What is an "inactive user account" as used in PCI DSS Requirement 8.1.4?
An inactive user account is one that has not been used in over 90 days. Inactive accounts are often targets for attackers since they are generally not monitored, and changes …
Recent FAQ Changes RSS
Latest changes to PCI SSC frequently asked questions.
Is it permissible to use FTP if proper security measures are implemented?
FTP is considered an insecure protocol as it does not provide protection for its communication channel or logon details.
PCI DSS Requirement 1.1.6 states that firewalls and router configurations …
Is it permissible to use self-decrypting files for encryption to send cardholder data?
PCI DSS Requirement 4.1 states that transmission of cardholder data over an open or public network must be secured using strong cryptography and security protocols. Examples provided in the requirement …
How do I contact the payment card brands?
Contact details for the payment brands are provided below:
American Express
- Website: www.americanexpress.com/datasecurity
- Email: AmericanExpressCompliance@trustwave.com
Discover
- Website: http://www.discovernetwork.com/merchants/data-security/index.html
- For questions about …
How do I contact the payment card brands?
Contact details for the payment brands are provided below:
American Express
- Website: www.americanexpress.com/datasecurity
- Email: AmericanExpressCompliance@trustwave.com
Discover
- Website: http://www.discovernetwork.com/merchants/data-security/index.html - For questions about the …
How do I contact the payment card brands?
Contact details for the payment brands are provided below:
American Express
- Website: www.americanexpress.com/datasecurity
- Email: AmericanExpressCompliance@trustwave.com
Discover
- Website: http://www.discovernetwork.com/merchants/data-security/index.html - For questions about the …
How do I contact the payment card brands?
Contact details for the payment brands are provided below:
American Express
- Website: http://www.americanexpress.com/datasecurity
- Email: AmericanExpressCompliance@trustwave.com
Discover
- Website: http://www.discovernetwork.com/merchants/data-security/index.html
- For questions …
What is meant by "adequate network segmentation" in the PCI DSS?
At a high level, adequate network segmentation isolates systems that store, process, or transmit cardholder data from those that do not. Network segmentation can be achieved through a number of …
How do I contact the payment card brands?
Contact details for the payment brands are provided below:
American Express
- Website: www.americanexpress.com/datasecurity
- Email: AmericanExpressCompliance@trustwave.com
Discover
- Website: http://www.discovernetwork.com/merchants/data-security/index.html
- For questions about …
How do I contact the payment card brands?
Contact details for the payment brands are provided below:
American Express
- Website: www.americanexpress.com/datasecurity
- Email: AmericanExpressCompliance@trustwave.com
Discover
- Website: http://www.discovernetwork.com/merchants/data-security/index.html - For questions about the …